785141 - Privacy Review Needed for Prospective MozCamp Asia Vendors

Status: RESOLVED FIXED

(Privacy Graveyard :: Product Review, task)

Description

[Katherine Naszradi [:knaszradi]]

Attachment: e27 questionnaire

Hi all:

We're hoping to make our decision on which vendor we would like to contract for MozCamp Asia by end of next week. While we are reviewing their proposals, we'd like to get your feedback on the privacy questionnaires they have provided for us. We will also be submitting the final questionnaire on this bug tomorrow (for a total of 3). Please let us know if you have any questions.

Thanks,

Kate

Comment 1

[Katherine Naszradi [:knaszradi]]

Attachment: e27 Privacy Policy

Comment 2

[Katherine Naszradi [:knaszradi]]

Attachment: World Express Questionnaire

Comment 3

[Katherine Naszradi [:knaszradi]]

Attachment: Red Events Privacy Questionnaire

Red Events also indicated:
"We currently do not have a company privacy policy set in place as we would usually follow our clients guidelines, we would be happy to adopt Mozilla's privacy policy for this event."

Comment 4

[Katherine Naszradi [:knaszradi]]

Attachment: World Express Privacy Policy/Agreement

Comment 5

[Katherine Naszradi [:knaszradi]]

Hi! 

I've now attached privacy questionnaires that have been completed from our prospective Asia vendors. We are highly leaning towards choosing e27 based on their experience with similar technology clients and would like to be able to let them know by EOW. Would it be possible to get a review of their questionnaire by tomorrow EOD? It would be much appreciated!

Please let me know if you have any questions.

Thanks,

Kate

Comment 6

[Stacy Martin [:stacy]]

Hi Kate,

I read through all of the attached documents.  For e27, can you ask them to clarify if/how they would be using Basecamp and Eventbrite for our event?  And if/how they would be using viral sharing for our event?

Comment 7

[Stacy Martin [:stacy]]

To clarify, my preference is that they don't use either.  Is either needed or requested by us?  Other than that, they look fine to me, as long as they're willing to sign our data addendum.  Their privacy policy isn't very robust, but our contract language should remedy that.

Comment 8

[Katherine Naszradi [:knaszradi]]

Thanks Stacy, I'm emailing them this question now and cc'ing you. Should I provide them with the data addendum now or would this be a part of the contract?

Thanks!

Kate

Comment 9

[Katherine Naszradi [:knaszradi]]

Answers from e27 (Stacy - I've also cc'd you on the email chain):

1) Basecamp is a project management tool we will use internally to manage the project. This allows us to better communicate with the team. This tool will be used for internal staff only, so only the project mangers from e27 and Embrya will access it. At the end of the project, we will delete all materials pertaining to the project. If there is any retained information, we will export it and pass it to you.

2) Eventbrite is a event management and registration program we use. In this case, since Mozilla will be handling registration, we wont be using this registration system. If Mozilla would like us to handle the registration, then we will use Eventbrite. It gives us a secure environment to manage user data and update attendees of the event. At the end of the event, we will be surrendering all the data to Mozilla and will be deleting all the records from the system. e27 will not be retaining any attendee records.

3) There will be no viral sharing for the event since this is a closed event and non-Mozilla members will not be allowed at the event.

Comment 10

[Stacy Martin [:stacy]]

Thank you, Kate.  It sounds like the security review would cover Basecamp, if it will contain personal info (PII).  If no PII, then no privacy concerns.  With no Eventbrite and no viral sharing, looks fine so long as they sign the data addendum.

Comment 11

[Katherine Naszradi [:knaszradi]]

Great - thanks Stacy!

Comment 12

[Stacy Martin [:stacy]]

I'm going to close this one out, since the privacy review has been completed.

Comment 13

[Katherine Naszradi [:knaszradi]]

Thanks Stacy!